
OVERALL CLASSIFICATION: 



JNCLASS 



Quantico 

Strategic Analysis 
| Intel Collection, and PFI Full 
Investigations 





UNCLASSIFIED//FOUO 



UNCLASSIFIED//FOUO 

DIOG Sections 4, 9, 15 



SSA ... 

Division ... 

- (Tel Number) 




Overall Training Objective: 

Provide an instructional foundation on the DIOG 
and then apply the knowledge gained by using 
hypothetical examples and scenarios. Upon 
completing this course of instruction you should 
have a firm grasp of the concepts and principles 
underpinning the DIOG. 
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Participation Standards: 

Questions are welcome; however, if your question is about a 
specific set of facts that may divert the training objective, please 
direct your question to one of the Training team members at a 
break for a response. 

During the scenario exercises, participants will be called upon to 
provide their response to particular facts or circumstances. Each 
Unit/Section should select a representative to speak for the 
Unit/Section and rotate that responsibility among the group. The 
scenarios are meant to prompt discussion, but the presenters 
must keep the scenario moving forward. Please understand that 
everyone may not be able to voice their perspective in the group 
setting. Keep in mind there may be several avenues to reach the 
same justified conclusion. You may use your handouts and 
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DIOG Section 1: 
Scope & Purpose 



• DIOG applies to all investigative and 
intelligence collection activities conducted 
by the FBI 

- within the United States 

- in the United States territories 

- outside the territories of all countries 

• DIOG does not apply to investigative and intelligence 
collection activities of the FBI in foreign countries 

- governed by AGGs for Extraterritorial FBI 
Operations (national security and criminal) 
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DIOG Section 1: 
Scope & Purpose 



In addition to this policy document, each FBIHQ 
substantive Division has a Policy Implementation 
Guide (PG) that supplements the DIOG. 



As a result, numerous FBI manuals, electronic 
communications, letterhead memoranda, and 
other policy documents are incorporated into the 
DIOG and Division PGs, thus, consolidating FBI 
policy guidance. 
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DIOG 
Overview 



The AGG-Dom replaces the following six guidelines: 

• The Attorney General's Guidelines on General Crimes, Racketeering Enterprise and Terrorism 
Enterprise Investigations (May 30, 2002) 

• The Attorney General's Guidelines for FBI National Security Investigations and Foreign 
Intelligence Collection (October 31, 2003) 

• The Attorney General's Supplemental Guidelines for Collection, Retention, and Dissemination 
of Foreign Intelligence (November 29, 2006) 

• The Attorney General Procedure for Reporting and Use of Information Concerning Violations 
of Law and Authorization for Participation in Otherwise Illegal Activity in FBI Foreign Intelligence, 
Counterintelligence or International Terrorism Intelligence Investigations (August 8, 1988). 

• The Attorney General's Guidelines for Reporting on Civil Disorders and Demonstrations 
Involving a Federal Interest (April 5, 1976) 



• The Attorney General's Procedures for Lawful, Warrantless Monitoring of Verbal 
Communications (May 30, 2002) [only portion applicable to FBI repealed] 
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Policy Environment for Domestic Operations 
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The Test- 



so questions 
- Multiple Choice 
■ True/False 

* Max 20 mins each question 
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Taking the test... 

- Access to testing site 

- Materials 

■DIOG 
•Charts 

■ PowerPoint slides 

■ Notes 



Max 20 mins each question 
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IOG Section 4: Privacy and Civil Liberties, 
and Least Intrusive Methods 



UfAltflAMf 



The AGG-Dom provide specific guidance and 
authorization for intelligence analysis and planning. This 
authority enables the FBI to identify and understand 
trends, causes, and potential indicia of criminal activity 
and other threats to the United States that would not be 
apparent from the investigation of discrete matters alone. 
By means of intelligence analysis and planning, the FBI 
can more effectively discover criminal threats, threats to 
the national security, and other matters of national 
intelligence interest, and can provide the critical support 
needed for the effective discharge of its investigative 
responsibilities and other authorized activities. 




Responsibility to protect the American public, not only from 
crime and terrorism, but also from incursions into their 
constitutional rights; accordingly, all investigative activities 
must fully adhere to the Constitution and the principles of 
civil liberty and privacy. 

Provisions of the AGG-Dom, other AG guidelines, and 
oversight from DOJ components, are designed to ensure 
FBfs activities are lawfu , appropriate, and ethical, as well 
as effective in protecting civil liberties and privacy. 

DOJ and FBI's Inspection Division, Office of Integrity and 
Compliance, the OGC, other Bureau components, and 
you share responsibility for ensuring the FBI meets these 
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DIOG Section 4: Privacy and Civil 
Liberties, and Least Intrusive Methods 



No investigation or assessment can be commenced 
based solely on race, ethnicity, national origin, religion of 
the subject or the exercise of First Amendment rights. 

Corollary to this AGG requirement is the Privacy Act, 
which states that each agency that maintains a system 
of records shall "maintain no record describing how any 
individual exercises rights guaranteed by the First 
Amendment unless expressly authorized by statute or by 
the individual about whom the record is maintained or 
unless pertinent to and within the scope of an 
authorized law enforcement activity. 5 U.S.C. 




hi 
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• What can you do with this information? 
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DIOG Section 4: Privacy and Civil 
Liberties, and Least Intrusive Methods 



FIRST AMENDMENT RIGHTS: 

Individuals or groups who communicate with each other or with 
members of the public in any form in pursuit of social or political 
causes-such as opposing war or foreign policy, protesting government 
actions, promoting certain religious beliefs, championing particular local, 
national, or international causes, or a change in government through 
non-criminal means, and actively recruit others to join their causes- 
have a fundamental constitutional right to do so. An assessment may 
not be initiated based solely on the exercise of these First Amendment 
rights. If, however, a group exercising its First Amendment rights also 
threatens or advocates violence or destruction of property, an 
assessment would be appropriate 
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DIOG Section 4: Privacy and Civil 
Liberties, and Least Intrusive Methods 



FIRST AMENDMENT RIGHTS 

No investigative activity, including assessments, may be 
taken solely on the basis of activities that are protected by 
the First Amendment or on the race, ethnicity, national 

origin or religion of the subject. 

If an assessment or predicated investigation touches on or 
is partially motivated by First Amendment activities, race, 
ethnicity, national origin or religion, it is particularly 
important to identify and document the basis for the 
assessment with clarity 




UNCLASSIFIED//FOUO 



DIOG Section 4: Privacy and Civil 
Liberties, and Least Intrusive Methods 
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All activities must be consistent with the Attorney General's 2003 
Guidance Regarding the Use of Race by Federal Law Enforcement 
Agencies (forbids the use of racial profiling and requires activities 
involving the investigation or prevention of threats to the national 
security to comply with the Constitution and laws of the United States) 

The DIOG stresses several points in each section: 

• No investigation or assessment can be commenced based solely on 
race, ethnicity, national origin, religion, or exercise of First 
Amendment rights 

• The FBI must use the least intrusive method that is feasible under 
the circumstances 

• In connection with Foreign Intelligence collection, agents must 
operate openly and consensually with U.S. Persons, to the extent 
practicable 

• All investigative activities must have an "authorized purpose" 
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DIOG Guidance on use of Race or Ethnicity 
As to individuals : 

1 . Permits the consideration of ethnic and racial identity 
information based on specific reporting; 

2. The race or ethnicity of suspected members, 

associates, or supporters of an ethnic-based gang or criminal 
enterprise may be collected when gathering information about or 
investigating the organization; or 

3. Ethnicity may be considered in evaluating whether a subject is- 
or is not-a possible associate of a criminal or terrorist group that 
is known to be comprised of members of the same ethnic 
grouping-as long as it is not the dominant factor for 

focusing on a particular person 

......:L. :,;^iA^aL^^ 
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DIOG Section 4: 
Use of Race or Ethnicity 



DIOG Guidance on use of Race or Ethnicity 

As to a community : 

1. Collecting and analyzing demographics -if these locations will 
reasonably aid the analysis of potential threats and vulnerabilities, 
and, overall, assist domain awareness 

. 2. Geo-Mapping ethnic/racial demographics - if properly collected 

3. General ethnic/racial behavior - cannot be collected, unless it 
bears a rational relationship to a valid investigative or analytical need 

4. Specific and relevant ethnic behavior 

5. Exploitive ethnic behavior - by criminal or terrorist groups 




The AGG-DOM and the DIOG require that the 
" least intrusive" means or method be 
considered and, if operationally sound and 
effective, used to obtain intelligence or 
evidence in lieu of a more intrusive method 
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DIOG Section 4: Privacy and Civil Liberties, 
and Least Intrusive Methods 



By emphasizing the use of less intrusive 
means, employees will be able to balance: 

Our need for evidence/intelligence 

vs. 

Mitigating potential negative impact on the privacy and civil 

liberties of people/public 
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DIOG Section 4: Privacy and Civil Liberties, 
and Least Intrusive Methods 



Primary factor in determining "intrusiveness": 

• The degree of procedural protection that the law and the 
A6G-D0M provide for the use of the particular method. 



- Examples of "more intrusive" methods: Search 
Warrants, wiretaps, UCOs 

-Examples of less intrusive" methods: checks of 
government databases, state or local criminal record 
checks, commercial databases, interviews 
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DIOG Section 4: Privacy and Civil Liberties, 
and Least Intrusive Methods 



Items to consider when determining the relative intrusiveness of 
an investigative method: 

• Is method permitted prior to the initiation of an assessment? 

• Is the method relevant to the assessment or investigation? 

• Will the information collected or obtained likely further the 



What alternatives exist for gathering the same information? 

Are those alternatives relatively less intrusive? 

What time span is involved in using the investigative method 
(days, weeks, months)? 

What confidence level is associated with the information 
gathered using the investigative method? 

Will the method resolve a pending investigative issue quickly? 



L 




Factors to Determine "Intrusiveness": 

1. Nature of the information sought 

2. Scope of the information sought 

3. Scope of the use of the investigative 
method 

4. Source of the information sought 

5. Risk of public exposure 
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As of February 20, 2009 



DIOG Section 5 &1 1 : Investigative Methods 

Authorized Methods for Assessments and Predicated investigations 

Red indicates methods not alkwissi under a particular operational activity; Green indicates methods allowed. 



Obtain publiclyavailable information 



Access and examine FBI and other DOJ records, and obtain information from any FBI or DOJ personnel 

Access and examine records maintained by, and request information from, other federal, state, local, tribal, or foreign governmental entities or 
agencies 



Use online services and resources (whether nonprofit or commercial), 



Use and recruit human sources in conformity with AG Guidelines Regarding the Use of FBI Confidential Human Sources 
Interview or request information from members of the public and private entities [includes pretextual interviews] 



Accept information voluntarily provided by governmental or private entities 



Engage in observation or surveillance not requiring a court order 



il covers 



Physical.searches of personal or real property where a warrant or court orderls not legally required because there is no reasonable expectation 
of privacy (e-g. t trash covers) 

Consensual monitoring of communications, including consensual computer monitoring, is subject to legal review by the CDC or the FBI OGC. 
Where a sensitive monitoring circumstance is involved, monitoring must be approved by the Criminal Division or, if the investigation concerns 
foreign intelligence or a threat to the national security, by the Na tional Security Division 

Use of closed-circuit television, direction finders, and other monitoring devices, subject to legal review by the CDC or FBI OGC 

Polygraph examinations ^ ^ 

Undercover operations 

Compulsory process as authorized by law, including Federal Grand Jury and other subpoenas and National Security Letters (Federal Grand Jury 
subpoenas for telephone and electronic mail subscriber records can be used during type 1 and.2 Assessments only) 



Use of pen registers and trap and trace devices 



Electronic surveillance 



Foreign Intelligence collection under Title VII of FISA 



Physical searches, .including mail openings, where a warrant or court order is legally required because there is an expectation of privacy 
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Investigative 
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NdneBecjuired 



Taskirjgia UCE to attend a religious service 



5,9B 



or group 

(Consult the DlOG for handheld photo and video 
surveillance With no reasonable expectation of 
oiim) . 



consul 



None Required* 



; 5.9C 



Justice (DOJ) records, and obtain information from 



^ ASAG Approval; 



and 



>5;9D 



lIlSOTIJ 



lione (Unless such approval is required by.MOU ; 



ribal, or fofeign governmental entities or agencies 



JMOU:;6r other agreements) 
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Use onlinelservices and resources (whether nonprofit 
or commercial) 



:5,9F 



Interview or request information from members of the 

tit 



represented persons; members of U;S* 

perspnne]; or other substbntjye division 
,1 ; requirernents , 



urea except for cpr 
s,;iienibers of U^iopgress, or their staffs,* 



represented persons, members of U.£ 
Congress, or their s 

"'iioi 
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v None:Required, 



Use and recruit human sources 
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Hone Required; (utilize Delta 



;ingia 



nous service 



, t \r";" ; SACApproval ! :,, 



, " "SSAApproval^' 



SSA Approval!- 



5:91 



Federal Grand Jury subpoenas for telephone or 
electronic mail subscriber information 



US Attorney pffice Approval^ 



Not Refmitted ; 
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Investigative Methods/Approvals Chart 



11.3 Mail covers 



11.4 



11.5 



11.5 



11.6 



11.7 



11.8 



11.8 



11.9 



11.9 



11.9 



11.10 



11,11 



11.12 



11.13 



11.14 



a warrant or court order is 
bec< 
N 



lable expectation of privacy 



Consensual monitoring of communications, including 



Consensual monitoring of communications, including 
consensual computer monitoring, with a sensitive 
monitoring circumstance 



Use of closed-circuit television, direction finders, and 



Polygraph examinations 



Undercover operations, Group I 



Compulsory process as authorized by law; Federal 
Grand Jury and trial subpoenas 



Administrative Subpoenas: Sexual Exploitation 



Administrative Subpoenas: Healthcare Fraud 



National Security Letters 



and transactional records 



Electronic surveillance 



Physical searches, where there is reasonable 
expectation of privacy, including mail openings 



Acquisition of foreign intelligence information in 
conformity with Title VII of the Foreign Intelligence 
Surveillance Act 



Not Permitted 



Not Permitted 



Not Permitted 



Not Permitted 



Not Permitted 



Not Permitted 



CDCorOGC Review 
SSA Approval 



CDC or OGC Review, SAC Approval, DOJ Criminal 
or DQilNSD Approval 



CDC Review;SAC or ASAC with delegated 
authority; National Security cases also require NSD 
unitUACB 



CDC review, SAC, and AD and CUORC or UCRC 



US Attorney's Office Approval 



SAC, ASAC, SSRA, or Drug Squad SSA 



CDC or OGC Review 
SSA Approval, 



CDC or OGC Review, SAC Approval, DOJ 
Criminal or DOJ NSD Approval 



SSA Approval 



CDC Review, SAC or ASAC with delegated 
authority, NSB«Unit/UACB Approval 



CDC review, SAC and AD and UCRC (EAD/DD 
certain cases) Approval 



US, Attorney's Office Approval 



Field Office; CDC Review, ADIC or SAC Approval, 



HQ: NSLB Review; DD or EAD-NSB or AD & DADs 
CT/CD/CyD or GC or Deputy GC-NStB Approval 



Statute/Court Order, Consult DIOG 



FISA Court or District Court Order 



FISA Court Order 



Not Permitted 



for Non-USPERbyFISA Court 
order 



FISA Court order 
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DIOG Section 15: 

Intelligence Analysis and Planning 



Overview: Authority for planning and developing intelligence 
analysis to support the intelligence functions and missions of the 
FBI is incorporated in AGG-Dom, Part IV. This section elaborates 
upon the means by which the investigative assessments outlined in 
AGG-Dom, Part II are authorized for the FBI to undertake in 
executing its mission to discover and avert criminal threats and 
threats to US national security 



• The term "assessment" as used within the DOJ to describe aspects 
of investigative activity should not be confused with the intelligence 
community use of the same word to describe intelligence analysis 
products such as an intelligence assessment 
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DIOG Section 15: 

Intelligence Analysis and Planning 



Strategic Planning and Analysis: The FBI is 
authorized to develop overviews and analysis of 
threats to and vulnerabilities of the United 
States and its interests in areas relative to the 
FBI's responsibilities. The FBI employs the 
following methodologies to identify, target and 
assess these threats: 

- Domain Management 

- Collection Management 

- Written Intelligence Products 

- Geospatial Intelligence (GEOINT) 




• Domain Management (cont): Domain Management is undertaken at 
the Field Office and national levels. All National Domain Assessments 
must be coordinated in advance with the Directorate of Intelligence. All 
information collected for Domain Management must be documented in 



• Collection Management: A formal business process through which 
Intelligence Information Needs and Intelligence Gaps (e.g., unknowns) 
are expressed as Intelligence Collection Requirements (questions or 
statements requesting information), prioritized in a comprehensive, 
dynamic Intelligence Collection Plan. 
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DIOG Section 15: 

Intelligence Analysis and Planning 



Written Intelligence Products: The FBI produces written 
intelligence products which represent the results of collection efforts 
in the field (raw intelligence) and analytic judgments made from the 
compilation and synthesis of relevant raw intelligence (finished 
intelligence). 



US Person Information: Information regarding US persons is not 
to be included in intelligence products if the pertinent intelligence 
can be conveyed without including identifying information. An 
exception would be if the context for usage is publicly accessible 
information, i.e., the white powder anthrax letter addressed to 
Senator Tom Daschle in October 2001 . 
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DIOG Section 15: 

Intelligence Analysis and Planning 



Raw Intelligence: This represents information collected from 
sources which is generally considered to be unvetted or not 
confirmed by other reporting means. Such reporting information is 
typically captured in Intelligence Information Reports (URs), FD 302s 
and ECs. 



• Finished Intelligence: Such reports represent judgments made by 
intelligence analysts in the field or at FBIHQ regarding the synthesis 
of multiple, relevant raw intelligence source reports which indicate 
probable intent or action by threat actors of either a criminal or 
national security nature. FBI finished intelligence products used are 
the Intelligence Bulletin (IB), Intelligence Assessment (IA) and 
Special Event Threat Assessment (SETA). Domain Assessments 
and briefings can also represent finished intelligence products. 
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DIOG Section 15: 

Intelligence Analysis and Planning 



Intelligence Systems: The FBI is authorized to operate intelligence, 
identification, tracking and information systems in support of 
authorized investigative activities or for such other additional 
purposes as may be legally authorized, such as intelligence tracking 
systems related to terrorists, gangs, or organized crime groups. , 



Information is shared both internally within the FBI and externally to 
LE or USIC partners as appropriate based on the classification and 
handling instructions established by the managers of the programs 
which have created these files or reports. Common information 
platforms used for sharing and receiving intelligence products are 
Law Enforcement Online (LEO). Intellink (both S ecret and Top 



Secret for the USIC) and 
terrorism community. 



for the counter- 
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DIOG Section 15: 

Intelligence Analysis and Planning 



Geospatial Intelligence (GEOINT) is the exploitation and analysis of 
imagery and geospatial information to describe, assess and visually 
depict physical features and geographically- referenced activities on 
the Earth. Mapping is an activity under GEOINT and may be used in 
assessments (Domain Management; Collection Management) and 
predicated investigations 
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DIOG Section 9: 
Foreign Intelligence 



Foreign Intelligence is "information relating to the capabilities, 
intentions, or activities of foreign governments or elements thereof, 
foreign organizations, or foreign persons, or international terrorists." 

A Foreign Intelligence Requirement is a collection requirement 
issued by USIC and accepted by the FBI Dl. Foreign Intelligence 
Requirements from the USIC fall into two categories which are 

- FBI Requirements are those that address national security 
issues that are within the FBI's core national security mission 

- Positive Foreign Intelligence Requirements are those that 
address the military, economic and foreign relations concerns 
of foreign governments, which are within FBI's responsibility 
as part of the USIC but are not directly related to national 
security concerns 
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DIOG Section 9: 
Foreign Intelligence 



Requirements in the first category that are accepted by 
the Dl as "FBI Requirements" will be worked within a 
properly authorized Type 3 Assessment or incidental to a 
predicated case worked by a substantive squad. 

Foreign Intelligence Requirements that fall into the 
second category will be work ed exclusively under 



and will be referred to as 
Positive Foreign Intelligence" Requirements. 
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DIOG Section 9: 
Positive Foreign Intelligence 



Positive Foreign intelligence (PFI) collection in the FBI is a 
requirements-based activity 

Under the AGG-Dom, there are two categories of "authorized 
activity" under which PFI may be collected: 

- a (non-predicated) Assessment relating to "a matter of foreign 
intelligence interest" responsive to Fl requirements 

- a Full Investigation predicated on an Fl requirement 

- Both must be requirements-based and approved by FBIHQ Dl 

In collecting Fl, the FBI will generally be guided by nationally- 
determined intelligence requirements, including the National 
Intelligence Priorities Framework and the National HUMINT 
Collection Directives, or any successor directives issued under the 
authority of the Director of National Intelligence 
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PFI Full Investigations 



mmm 



• Used when a collection capability (source) is established or positively 
identified. 

• PFI requirement must have been accepted by the FBI as the agency with 
"primary" collection responsibility. 

• The authorized purpose must be docume nted in the opening EC Q 

• Must be approved in advance by Dl, CMS, CPMU - Files opened by the 
Field Office. 

• Sensitive PFI matters require field office CDC review, SAC approval & CMS 
Section Chief approval. 

• Unique PFI file number for each Dl, CMS, CPMU approved PFI 
requirement. 

• Approval EC from CPMU will contain explicit directions regarding the 
approved PFI investigation title, requirement, etc. 

• No duration limit for PFI full investigations. 
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Privacy Act / USPER Considerations 



PFI is not about people - it is about a foreign power's 
capabilities, intentions or activities... 

- Avoid identifying individuals (USPERS) in PFI files unless ID is 
essential to satisfy the collection requirement. 

- If you must ID U.S. persons (covered by the Privacy Act) limit 
any/all identifying info to basic identifiers. 

- If you must ID U.S. persons (covered by the Privacy Act) do not 
index the person in ACS. 

or a Type 5 assessment to record information about 



- Utilize 



prospective or potential sources, etc. 
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DIOG Section 9: 
Example 
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Should Indianapolis open a PFI Assessment? 
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DIOG Section 9: 
Example 
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FBIHQ DIOG Training 



SSA 




